Privacy Policy

1. Who we are

Mongkol ("we", "our", or "us") is a bilingual wedding and ceremony invitation platform based in Phnom Penh, Cambodia. This policy explains what personal data we collect when you use mongkol.com, how we use it, and what rights you have.

2. Data we collect

We collect only what is necessary to operate the platform:

• Account data — your name, email address, and password when you register as an organiser.
• Event data — ceremony details (names, dates, venue, programme) that you enter when building an invitation.
• Guest data — names and (optionally) contact details of guests you add to your invitation. You are the data controller for your guests; we process this data on your behalf.
• RSVP and messages — responses and messages that guests submit through your invitation link.
• Usage data — page views, link opens, and check-in events, aggregated to show you analytics on your invitation dashboard.

3. How we use your data

• To provide and operate the invitation and guest-management service.
• To send you transactional emails (account verification, password reset).
• To display invitation analytics on your organiser dashboard.
• To improve the platform and fix bugs using aggregated, anonymised usage patterns.
• We do not sell your data or your guests' data to third parties.

4. Guest data and your responsibilities

When you add guests to Mongkol, you are acting as a data controller for that personal information. You are responsible for ensuring you have a lawful basis to share your guests' names and contact details with us (for example, that they have agreed to receive the invitation). We will only use guest data to power features you have enabled (RSVP, check-in, message wall).

5. Cookies

We use strictly necessary session cookies to keep you logged in and remember your language preference. We do not use advertising or cross-site tracking cookies. You can disable cookies in your browser settings, but this will prevent you from staying signed in.

6. Data retention

We keep your account and event data for as long as your account is active. If you delete your account, all associated data — including invitations, guest lists, and RSVP responses — is permanently deleted within 30 days. You can export your data at any time from your account settings before deletion.

7. Security

We store data on encrypted servers. Passwords are hashed and never stored in plain text. All data in transit is protected by TLS. Despite these measures, no internet service is 100% secure — please use a strong, unique password for your account.

8. Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your account and all associated data.
• Export your event and guest data as CSV at any time.

To exercise any of these rights, email privacy@mongkol.com.

9. Contact

Questions about this policy? Reach us at privacy@mongkol.com or through our Contact page.